bda68a89f7c444f6edc0909fc0a38446_JaffaCakes118 | Triage

Sharing

General

Target

bda68a89f7c444f6edc0909fc0a38446_JaffaCakes118
Size

93KB
MD5

bda68a89f7c444f6edc0909fc0a38446
SHA1

966d84e375b8b7bebf95b14885a881bce1a019c7
SHA256

5a79974200a2a144c0d2eb24fce2b7b3984b168057b80ff3808202a8c883cbfb
SHA512

af7e92827492c295cce86bfaacb2f340ef4a1053946a9aae1cb3bd11041acba96a5c9519de844bea317e3afe61b23c49d0b55ebc3dbf5cb95bae5cef349ff30f
SSDEEP

1536:dRZ/SPQOMLY2kHPhyjeYuKXPIJNYhuOPxIXSpvE/xYM1z+TbTs15y7BMe:fZ/SPQOMLY2kvhZKwJvSpsZl+T3B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bda68a89f7c444f6edc0909fc0a38446_JaffaCakes118

Files

bda68a89f7c444f6edc0909fc0a38446_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e831f73c13514501361352a09e5fabc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

RegisterBindStatusCallback
URLDownloadA
CompareSecurityIds
DllUnregisterServer

wininet

FindFirstUrlCacheEntryW
ForceNexusLookupExW
FtpRemoveDirectoryA
CommitUrlCacheEntryW
FtpSetCurrentDirectoryA
GetUrlCacheEntryInfoW

Sections

.text
Size: 69KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE